This vulnerability in the Yaad Sarig Payment Gateway For WC plugin is caused by missing authorization checks, which leads to incorrect access control enforcement. The issue affects all versions up to 2.2.11. According to the CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L), the vulnerability can be exploited remotely without privileges or user interaction, resulting in a partial denial of service or availability impact. No known exploits are reported in the wild, and no official patch or remediation guidance has been provided.

The vulnerability allows an attacker to exploit missing authorization controls remotely without authentication or user interaction. While it does not compromise data confidentiality or integrity, it can cause a denial of service or availability disruption in the affected payment gateway plugin. There are no known active exploits targeting this vulnerability currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is referenced, users should monitor for updates from the vendor or security advisories. Until a fix is available, consider restricting access to the affected plugin or disabling it if feasible to reduce exposure.